206 matches found
can-i-take-over-xyz
Disclaimer ⚠️ The authors of this document take no responsibility for correctness. This project is merely here to help guide security researchers towards determining whether something is vulnerable or not, but does not guarantee accuracy. This project heavily relies on contributions from the...
FuegoTest
FuegoTest FuegoTest is a Command Line Interface CLI tool designed to detect devices potentially vulnerable to CVE-2023-20048 in Cisco Firepower Management Center FMC. Utilizing the rich library, FuegoTest provides an enhanced user experience with progress bars and styled text for terminal output...
minion-ticket-bleed-plugin
Minion Ticketbleed Plugin This is a plugin for Minion that run a check for Ticketbleed CVE-2016-9244 vulnerability on F5 TLS layer. The test can either runs as a go script or an linux binary. The script is improved from https://filippo.io/Ticketbleed/ Installation Clone the project with git clone...
CVE-2023-23752
CVE-2023-23752 CVE-2023-23752 Joomla Unauthenticated Information Disclosure Description Supports high-concurrency detection Write url into urls.txt, only supports http://ip:port & https://ip:port format Use the -p parameter to add a proxy Just run Usage Help root@kitploit: .\CVE-2023-23752.exe -h...
next-cve-2025-66478
NextJS CVE-2025-66478 Scans all projects vulnerable to CVE-2025-66478 projects in the current working directory and reports them. Learn more about CVE-2025-66478 Warning This script doesn't fix any vulnerabilities. This is just for locating them. Please refer to this article to learn more about t...
CVE-2021-25646-exp
CVE-2021-25646-exp Apache Druid CVE-2021-25646 Remote Code Execution Vulnerability Detection and Exploitation Tool Input domain name or ip:port to perform vulnerability detection For targets where the vulnerability is detected, command execution exploitation can be performed Supports single targe...
CVE-2024-55591
FortiGate CVE-2024-55591 1Scan Latest Version https://github.com/0x7556/1Scan Affected Versions root@kitploit: FortiOS 7.0.0 through 7.0.16 FortiProxy 7.0.0 through 7.0.19 FortiProxy 7.2.0 through 7.2.12 POC Single Detection root@kitploit: ./poc 10.10.1.1 ./poc http://10.10.1.1 1Scan Batch...
CVE-2021-44228
CVE-2021-44228 Mass recognition tool for CVE-2021-44228 need to fix Crypto library to work with Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py replace line 77 : t = time.clock with : t = time.perfcounter how to use : sudo python3 192.168.0.0/8 mylog.txt...
detection-tool-cve-2019-13000
Detection tool for CVE 2019-13000 A tool that detect if your node has been victim of the invalid funding tx attack. Usage root@kitploit: java -jar checkfunding.jar --db eclair.sqlite Help root@kitploit: $ java -jar checkfunding.jar --help checkfunding 1.0 Usage: checkfunding options --db path to...
recheck
recheck The trustworthy ReDoS checker License MIT License. 2020-2025 C TSUYUSATO "MakeNowJust" Kitsune...
rocacheck
rocacheck Package rocacheck is a Go implementation of the key fingerprint algorithm that checks if an RSA key was generated by broken Infineon code and is vulnerable to factorization via the Return of Coppersmith's Attack ROCA / CVE-2017-15361...
KQL_sentinel_CVE-2025-21333
This repository does not have a README...
CVE-2024-36416
CVE-2024-36416 Tool for validating CVE-2024-36416 Usage root@kitploit: pip3 install -r requirements.txt python3 sukuna.py --help python3 sukuna.py --url http://./ --validate --payload-test Server-Side Log File Check Verify the server-side file, if the log file \service\example\proxy.log is =25MB,...
Vm4J
Vm4J A tool for detect vmware product log4j vulnerability. How it works? First start a JNDIExploit server. Start this tool and set any config to right setting. Send payload. Screenshot Support VMware HCX VMware vCenter VMware Workspace One Will be add VMware NSX VMware Horizon VMware vRealize...
ScanQLi
ScanQLi ScanQLi is a simple SQL injection scanner with somes additionals features. This tool can't exploit the SQLi, it just detect them. Tested on Debian 9 Features Classic Blind Time based GBK soon Recursive scan follow all hrefs of the scanned web site Cookies integration Adjustable wait delay...
SiteCore-RCE-Detection
SiteCore-RCE-Detection For detection of sitecore RCE - CVE-2021-42237 Sitecore Experience Platform Pre-Auth RCE - CVE-2021-42237 Relies on sitecore version detection and response when a request is made to vulnerale Report.ashx via Get and Post. The script takes a file containing list of urls in...
dirtypipe-ebpf_detection
dirtypipe-ebpfdetection -- Dirtypipe detection tool This program was made to detect Dirty Pipe exploitation attempts thanks to eBPF. It also monitors nonvulnerable kernels and docker containers. 🛫 If you want more details on how it works please read the blog post ! 🛬 How does it works? Default...
CVE-2021-37580
CVE-2021-37580 Support for single and batch verification of CVE-2021-37580 vulnerability Single URL detection: File batch verification:...